From 6a4237fe2a0da6c73db19001fd6ae6ae0ead715e Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:33:48 +0000 Subject: [PATCH 01/20] CORE-69: Update terra-common-lib from 1.1.68-SNAPSHOT to 1.1.79-SNAPSHOT --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index 0819b7491..d5ec2111e 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -23,7 +23,7 @@ object Dependencies { val workbenchOauth2V = s"0.11-$workbenchLibV" val monocleVersion = "2.0.5" val crlVersion = "1.2.42-SNAPSHOT" - val tclVersion = "1.1.68-SNAPSHOT" + val tclVersion = "1.1.79-SNAPSHOT" val slf4jVersion = "2.0.6" val excludeAkkaActor = ExclusionRule(organization = "com.typesafe.akka", name = "akka-actor_2.12") From 2090f6c9d438bf58144d16a7fce4dafff00b5f58 Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:33:50 +0000 Subject: [PATCH 02/20] CORE-69: Update sbt-scalafix from 0.14.5 to 0.14.9 --- project/plugins.sbt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/plugins.sbt b/project/plugins.sbt index f8441f75c..fca08baec 100644 --- a/project/plugins.sbt +++ b/project/plugins.sbt @@ -6,6 +6,6 @@ addSbtPlugin("org.scoverage" % "sbt-scoverage" % "2.4.3") addSbtPlugin("org.scalameta" % "sbt-scalafmt" % "2.5.6") -addSbtPlugin("ch.epfl.scala" % "sbt-scalafix" % "0.14.5") +addSbtPlugin("ch.epfl.scala" % "sbt-scalafix" % "0.14.9") addDependencyTreePlugin From fee8a87e80068fe31a452e168f1bcdab16812d13 Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:33:53 +0000 Subject: [PATCH 03/20] CORE-69: Update logback-classic from 1.5.23 to 1.5.38 --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index d5ec2111e..61270f0c6 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -49,7 +49,7 @@ object Dependencies { val jacksonCore: ModuleID = "com.fasterxml.jackson.core" % "jackson-core" % jacksonV val logstashLogback: ModuleID = "net.logstash.logback" % "logstash-logback-encoder" % "9.0" - val logbackClassic: ModuleID = "ch.qos.logback" % "logback-classic" % "1.5.23" + val logbackClassic: ModuleID = "ch.qos.logback" % "logback-classic" % "1.5.38" val ravenLogback: ModuleID = "com.getsentry.raven" % "raven-logback" % "7.8.6" val scalaLogging: ModuleID = "com.typesafe.scala-logging" %% "scala-logging" % scalaLoggingV From 87f21d59152fbab4ca7a5782cb967f78ffbb1b6d Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:33:55 +0000 Subject: [PATCH 04/20] CORE-69: Update sbt-assembly from 2.3.1 to 2.5.0 --- project/plugins.sbt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/plugins.sbt b/project/plugins.sbt index fca08baec..3214f0e73 100644 --- a/project/plugins.sbt +++ b/project/plugins.sbt @@ -1,4 +1,4 @@ -addSbtPlugin("com.eed3si9n" % "sbt-assembly" % "2.3.1") +addSbtPlugin("com.eed3si9n" % "sbt-assembly" % "2.5.0") addSbtPlugin("io.spray" % "sbt-revolver" % "0.10.0") From 76ca9ba476c43fbe9c9484d19139e5a4d40570e5 Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:33:58 +0000 Subject: [PATCH 05/20] CORE-69: Update jackson-core from 2.22.1 to 2.22.3 --- automation/project/Dependencies.scala | 2 +- project/Dependencies.scala | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/automation/project/Dependencies.scala b/automation/project/Dependencies.scala index a4292359b..cbeef0d71 100644 --- a/automation/project/Dependencies.scala +++ b/automation/project/Dependencies.scala @@ -3,7 +3,7 @@ import sbt._ object Dependencies { val scalaV = "2.13" - val jacksonV = "2.22.1" + val jacksonV = "2.22.3" val jacksonAnnotationsV = "2.22" val akkaV = "2.6.19" val akkaHttpV = "10.2.2" diff --git a/project/Dependencies.scala b/project/Dependencies.scala index 61270f0c6..ed0d16928 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -3,7 +3,7 @@ import sbt._ object Dependencies { val akkaV = "2.6.19" val akkaHttpV = "10.2.9" - val jacksonV = "2.22.1" + val jacksonV = "2.22.3" val jacksonAnnotationsV = "2.22" val scalaLoggingV = "3.9.6" val scalaTestV = "3.2.19" From 482b1f48fe6cd094dacf87f2b3f1778b30282d58 Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:02 +0000 Subject: [PATCH 06/20] CORE-69: Update google-cloud-nio from 0.128.9 to 0.128.14 --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index ed0d16928..c6bbf5812 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -116,7 +116,7 @@ object Dependencies { excludeWorkbenchModel ) val googleStorageLocal: ModuleID = - "com.google.cloud" % "google-cloud-nio" % "0.128.9" % "test" // needed for mocking google cloud storage. Should use same version as wb-libs + "com.google.cloud" % "google-cloud-nio" % "0.128.14" % "test" // needed for mocking google cloud storage. Should use same version as wb-libs val liquibaseCore: ModuleID = "org.liquibase" % "liquibase-core" % "4.33.0" From a975b3fb296e49b7a9f1b4934c51dfc59581e18c Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:05 +0000 Subject: [PATCH 07/20] CORE-69: Update guava from 33.5.0-jre to 33.7.2-jre --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index c6bbf5812..efd704b04 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -247,7 +247,7 @@ object Dependencies { // Needed because it looks like the dependency overrides of wb-libs doesn't propagate to the importing project... val rootDependencyOverrides = Seq( "org.apache.commons" % "commons-compress" % "1.28.0", - "com.google.guava" % "guava" % "33.5.0-jre", // Force JRE version, not Android version from grpc-core + "com.google.guava" % "guava" % "33.7.2-jre", // Force JRE version, not Android version from grpc-core // Jackson 2 and Jackson 3 co-exist. Set versions for both: "tools.jackson.core" % "jackson-core" % "3.2.1", "tools.jackson.core" % "jackson-databind" % "3.2.1", From c32af253db1831f00ec8ca3a5bf8969f88af76c5 Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:08 +0000 Subject: [PATCH 08/20] CORE-69: Update okio from 3.16.4 to 3.18.2 --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index efd704b04..815b38acb 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -131,7 +131,7 @@ object Dependencies { val slf4jApi: ModuleID = "org.slf4j" % "slf4j-api" % slf4jVersion val slf4jSimple: ModuleID = "org.slf4j" % "slf4j-simple" % slf4jVersion - val okio: ModuleID = "com.squareup.okio" % "okio" % "3.16.4" excludeAll excludeWorkbenchUtil2 + val okio: ModuleID = "com.squareup.okio" % "okio" % "3.18.2" excludeAll excludeWorkbenchUtil2 // pact deps val pact4sV = "0.9.0" From fdc8de1ab2bbf423ee3313e9b4461db1b598c4be Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:11 +0000 Subject: [PATCH 09/20] CORE-69: Update commons-codec from 1.20.0 to 1.22.1 --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index 815b38acb..a698c0ce4 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -189,7 +189,7 @@ object Dependencies { val terraCommonLib = tclExclusions("bio.terra" % "terra-common-lib" % tclVersion classifier "plain") // was included transitively before, now explicit - val commonsCodec: ModuleID = "commons-codec" % "commons-codec" % "1.20.0" + val commonsCodec: ModuleID = "commons-codec" % "commons-codec" % "1.22.1" val rootDependencies = Seq( // proactively pull in latest versions of Jackson libs, instead of relying on the versions From 140178f32cbea585514033470d94ac4c123ebb03 Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:14 +0000 Subject: [PATCH 10/20] CORE-69: Update grpc-core from 1.78.0 to 1.84.0 --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index a698c0ce4..f6feb311a 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -70,7 +70,7 @@ object Dependencies { val reactorNetty: ModuleID = "io.projectreactor.netty" % "reactor-netty" % "1.2.13" val excludIoGrpc = ExclusionRule(organization = "io.grpc", name = "grpc-core") - val ioGrpc: ModuleID = "io.grpc" % "grpc-core" % "1.78.0" + val ioGrpc: ModuleID = "io.grpc" % "grpc-core" % "1.84.0" val googleOAuth2: ModuleID = "com.google.auth" % "google-auth-library-oauth2-http" % "0.18.0" excludeAll excludIoGrpc val googleStorage: ModuleID = "com.google.apis" % "google-api-services-storage" % "v1-rev20250925-2.0.0" excludeAll excludIoGrpc // force this version From bbe45080dd5038cf20de669d01f3211d99ded423 Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:17 +0000 Subject: [PATCH 11/20] CORE-69: Update reactor-netty from 1.2.13 to 1.2.18 --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index f6feb311a..061115c07 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -67,7 +67,7 @@ object Dependencies { val akkaHttpTestKit: ModuleID = "com.typesafe.akka" %% "akka-http-testkit" % akkaHttpV % "test" val scalaCheck: ModuleID = "org.scalacheck" %% "scalacheck" % scalaCheckV % "test" - val reactorNetty: ModuleID = "io.projectreactor.netty" % "reactor-netty" % "1.2.13" + val reactorNetty: ModuleID = "io.projectreactor.netty" % "reactor-netty" % "1.2.18" val excludIoGrpc = ExclusionRule(organization = "io.grpc", name = "grpc-core") val ioGrpc: ModuleID = "io.grpc" % "grpc-core" % "1.84.0" From a49d03817690e4512a058a8924f84538640d0a12 Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:21 +0000 Subject: [PATCH 12/20] CORE-69: Update mockito-scala-scalatest from 2.0.0 to 2.2.3 --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index 061115c07..18798cefc 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -80,7 +80,7 @@ object Dependencies { val scalaTest: ModuleID = "org.scalatest" %% "scalatest" % scalaTestV % "test" val scalaTestScalaCheck = "org.scalatestplus" %% "scalacheck-1-18" % s"${scalaTestV}.0" % Test - val mockitoScalaTest = "org.mockito" %% "mockito-scala-scalatest" % "2.0.0" % Test + val mockitoScalaTest = "org.mockito" %% "mockito-scala-scalatest" % "2.2.3" % Test // All of workbench-libs pull in Akka; exclude it since we provide our own Akka dependency. // workbench-google pulls in workbench-{util, model, metrics}; exclude them so we can control the library versions individually. From 76ce47cb83f1f5a068f0dd6e495df7c0c119fcf7 Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:24 +0000 Subject: [PATCH 13/20] CORE-69: Update postgresql from 42.7.8 to 42.7.13 --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index 18798cefc..a24b59aa7 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -9,7 +9,7 @@ object Dependencies { val scalaTestV = "3.2.19" val scalaCheckV = "1.19.0" val scalikejdbcVersion = "3.4.2" - val postgresDriverVersion = "42.7.8" + val postgresDriverVersion = "42.7.13" val sentryVersion = "6.15.0" val nettyV = "4.2.16.Final" From 60bbd32af68a6e42d812ec2f707a5a48e24f2ade Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:25 +0000 Subject: [PATCH 14/20] CORE-69: Update sbt from 1.11.7 to 1.13.0 --- .github/workflows/verify_consumer_pacts.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/verify_consumer_pacts.yml b/.github/workflows/verify_consumer_pacts.yml index c6fe5b089..595784e0c 100644 --- a/.github/workflows/verify_consumer_pacts.yml +++ b/.github/workflows/verify_consumer_pacts.yml @@ -321,7 +321,7 @@ jobs: -e JANITOR_CLIENT_CREDENTIAL_FILE_PATH="" \ -e JANITOR_TRACK_RESOURCE_PROJECT_ID="" \ -e JANITOR_TRACK_RESOURCE_TOPIC_ID="" \ - sbtscala/scala-sbt:eclipse-temurin-17.0.15_6_1.11.7_2.13.18 \ + sbtscala/scala-sbt:eclipse-temurin-17.0.15_6_1.13.0_2.13.18 \ bash -c "git config --global --add safe.directory /working/sam && sbt \"set scalafmtOnCompile := false\" \"project pact4s\" \"testOnly *SamProviderSpec\"" can-i-deploy: # The can-i-deploy job will run as a result of a Sam PR. It reports the pact verification statuses on all deployed environments. From 24d0dbff702b9a5a11adcf23ad142dc4e281dcba Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:28 +0000 Subject: [PATCH 15/20] CORE-69: Update scalacheck from 1.19.0 to 1.20.0 --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index a24b59aa7..e9e9fa1f2 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -7,7 +7,7 @@ object Dependencies { val jacksonAnnotationsV = "2.22" val scalaLoggingV = "3.9.6" val scalaTestV = "3.2.19" - val scalaCheckV = "1.19.0" + val scalaCheckV = "1.20.0" val scalikejdbcVersion = "3.4.2" val postgresDriverVersion = "42.7.13" val sentryVersion = "6.15.0" From f42333c3f8b5f6297e5be321c6bd5969b158ab66 Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:30 +0000 Subject: [PATCH 16/20] CORE-69: Update sbt-scalafmt from 2.5.6 to 2.6.2 --- project/plugins.sbt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/plugins.sbt b/project/plugins.sbt index 3214f0e73..8e67794f0 100644 --- a/project/plugins.sbt +++ b/project/plugins.sbt @@ -4,7 +4,7 @@ addSbtPlugin("io.spray" % "sbt-revolver" % "0.10.0") addSbtPlugin("org.scoverage" % "sbt-scoverage" % "2.4.3") -addSbtPlugin("org.scalameta" % "sbt-scalafmt" % "2.5.6") +addSbtPlugin("org.scalameta" % "sbt-scalafmt" % "2.6.2") addSbtPlugin("ch.epfl.scala" % "sbt-scalafix" % "0.14.9") From ee6f05c3a3c0da6b827dba4d6604ce796b7206c2 Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:34 +0000 Subject: [PATCH 17/20] CORE-69: Update scalatest from 3.2.19 to 3.2.20 --- automation/project/Dependencies.scala | 2 +- project/Dependencies.scala | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/automation/project/Dependencies.scala b/automation/project/Dependencies.scala index cbeef0d71..c4eca223d 100644 --- a/automation/project/Dependencies.scala +++ b/automation/project/Dependencies.scala @@ -45,7 +45,7 @@ object Dependencies { "com.typesafe.akka" %% "akka-testkit" % akkaV % "test", "com.typesafe.akka" %% "akka-slf4j" % akkaV, "com.typesafe.scala-logging" %% "scala-logging" % "3.9.6", - "org.scalatest" %% "scalatest" % "3.2.19" % Test, + "org.scalatest" %% "scalatest" % "3.2.20" % Test, "org.scalatestplus" %% "scalacheck-1-18" % "3.2.19.0" % Test, "com.typesafe.scala-logging" %% "scala-logging" % "3.9.4", workbenchServiceTest, diff --git a/project/Dependencies.scala b/project/Dependencies.scala index e9e9fa1f2..42659f12c 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -6,7 +6,7 @@ object Dependencies { val jacksonV = "2.22.3" val jacksonAnnotationsV = "2.22" val scalaLoggingV = "3.9.6" - val scalaTestV = "3.2.19" + val scalaTestV = "3.2.20" val scalaCheckV = "1.20.0" val scalikejdbcVersion = "3.4.2" val postgresDriverVersion = "42.7.13" From 4ef6015fb2627ab4fc831160c6505c5c16d5c7d1 Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:36 +0000 Subject: [PATCH 18/20] CORE-69: Update sbt-scoverage from 2.4.3 to 2.4.4 --- project/plugins.sbt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/plugins.sbt b/project/plugins.sbt index 8e67794f0..e25339516 100644 --- a/project/plugins.sbt +++ b/project/plugins.sbt @@ -2,7 +2,7 @@ addSbtPlugin("com.eed3si9n" % "sbt-assembly" % "2.5.0") addSbtPlugin("io.spray" % "sbt-revolver" % "0.10.0") -addSbtPlugin("org.scoverage" % "sbt-scoverage" % "2.4.3") +addSbtPlugin("org.scoverage" % "sbt-scoverage" % "2.4.4") addSbtPlugin("org.scalameta" % "sbt-scalafmt" % "2.6.2") From 95f7aac52c6d9b8adce2d386337343d93177caeb Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:39 +0000 Subject: [PATCH 19/20] CORE-69: Update jackson-core from 3.2.1 to 3.2.3 --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index 42659f12c..05d84ba7e 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -249,7 +249,7 @@ object Dependencies { "org.apache.commons" % "commons-compress" % "1.28.0", "com.google.guava" % "guava" % "33.7.2-jre", // Force JRE version, not Android version from grpc-core // Jackson 2 and Jackson 3 co-exist. Set versions for both: - "tools.jackson.core" % "jackson-core" % "3.2.1", + "tools.jackson.core" % "jackson-core" % "3.2.3", "tools.jackson.core" % "jackson-databind" % "3.2.1", jacksonCore, jacksonAnnotations, From 7a745d516683b14cdd3394dfe7eeb75c86a10267 Mon Sep 17 00:00:00 2001 From: broadbot Date: Thu, 1 Oct 2026 12:34:42 +0000 Subject: [PATCH 20/20] CORE-69: Update jackson-databind from 3.2.1 to 3.2.3 --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index 05d84ba7e..943db3b4e 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -250,7 +250,7 @@ object Dependencies { "com.google.guava" % "guava" % "33.7.2-jre", // Force JRE version, not Android version from grpc-core // Jackson 2 and Jackson 3 co-exist. Set versions for both: "tools.jackson.core" % "jackson-core" % "3.2.3", - "tools.jackson.core" % "jackson-databind" % "3.2.1", + "tools.jackson.core" % "jackson-databind" % "3.2.3", jacksonCore, jacksonAnnotations, jacksonDatabind,